1. General Information
This policy applies to the website at the URL: apartamentyjan.com.pl
The operator of the website and the Data Controller is: Apartamenty Jan
Contact email address of the operator: biuro@apartamenty-jan.com.pl
The operator is the Controller of your personal data regarding the data provided voluntarily in the Service.
The Service uses personal data for the following purposes:
The Service collects information about users and their behavior in the following ways:
2. Selected Data Protection Methods Used by the Operator
Login areas and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal data and login credentials entered on the website are encrypted in the user's computer and can only be read on the destination server.
Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This way, the data is protected even if the database is stolen from the server.
User passwords are stored in hashed form. The hashing function works one-way—it is impossible to reverse its operation, which is the current standard in storing user passwords.
The Service uses two-factor authentication, which provides an additional layer of security for logging into the Service.
The Operator periodically changes its administrative passwords.
To protect data, the Operator regularly makes backups.
An essential element of data protection is the regular updating of all software used by the Operator for processing personal data, particularly the updating of software components.
3. Hosting
The Service is hosted (technically maintained) on the servers of the operator: another company.
The hosting company maintains server-level logs to ensure technical reliability. The recorded information may include:
4. Your Rights and Additional Information on How Data Is Used
In some situations, the Administrator has the right to transfer your personal data to other recipients if necessary for the execution of the contract concluded with you or to fulfill obligations incumbent on the Administrator. This applies to the following groups of recipients:
Your personal data is processed by the Administrator no longer than necessary to carry out activities related to them, as specified by separate regulations (e.g., accounting regulations). With respect to marketing data, the data will not be processed longer than for 3 years.
You have the right to request from the Administrator:
You have the right to object to the processing specified in 3.2 regarding the processing of personal data for the legitimate interests pursued by the Administrator, including profiling, but the right to object cannot be exercised if there are legitimate grounds for processing that are overriding with respect to your interests, rights, and freedoms, particularly establishing, pursuing, or defending claims.
A complaint against the Administrator's actions may be submitted to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary but necessary for the operation of the Service.
Actions involving automated decision-making, including profiling for the purpose of providing services under the concluded contract and for direct marketing by the Administrator, may be taken with respect to you.
Personal data is not transferred to third countries as understood by the data protection regulations. This means that we do not send them outside the European Union.
5. Information in Forms
The Service collects information provided voluntarily by the user, including personal data if provided.
The Service may save information about connection parameters (time stamp, IP address).
The Service, in some cases, may save information that helps link data in the form to the user's email address filling out the form. In such a case, the user's email address appears inside the URL of the page containing the form.
Data provided in the form is processed for the purpose resulting from the function of a specific form, e.g., for service request handling or business contact, service registration, etc. Each time, the context and description of the form clearly indicate what it is used for.
6. Administrator Logs
User behavior information on the website may be subject to logging. These data are used to administer the service.
7. Important Marketing Techniques
The Operator uses statistical traffic analysis on the site via Google Analytics (Google Inc. based in the USA). The Operator does not transmit personal data to this service operator, only anonymized information. The service is based on using cookies in the user's end device. Regarding information about user preferences collected by Google's advertising network, the user can view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/.
The Operator uses the Facebook pixel. This technology means that the Facebook service (Facebook Inc. based in the USA) knows that a person registered there is using the Service. In this case, it is based on data for which Facebook itself is the controller; the Operator does not transmit any additional personal data from itself to Facebook. The service is based on using cookies in the user's end device.
8. Information on Cookies
The Service uses cookies.
Cookies are IT data, particularly text files, stored in the User's end device and intended for use with the Service's websites. Cookies usually contain the name of the website they come from, the duration of storage on the end device, and a unique number.
The entity placing cookies on the User's end device and accessing them is the Service operator.
Cookies are used for the following purposes:
The Service uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User's end device until logging out, leaving the website, or shutting down the software (web browser). Persistent cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
Web browsing software (web browser) usually allows cookies to be stored on the User's end device by default. Service users can change settings in this regard. The web browser enables the deletion of cookies. Automatic blocking of cookies is also possible. Detailed information on this topic is contained in the help or documentation of the web browser.
Restrictions on the use of cookies may affect some functionalities available on the Service's websites.
Cookies placed in the User's end device may also be used by entities cooperating with the Service operator, particularly this concerns companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).
9. Managing Cookies – How to Express and Withdraw Consent in Practice?
If the user does not wish to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security, and user preference maintenance may hinder, and in extreme cases, prevent the use of websites.
To manage cookie settings, select the web browser you use from the list below and follow the instructions: